The fact that our certificate isn\’t installed on any device it only increases its security.
If the certificate is on a device where passwords are usually stored it is relatively easy for someone else with access to the device to sign for us. However, in order to use the cloud signature at least two authentication factors are required.